27 matches found
Design/Logic Flaw
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
CVE-2021-29765
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
CVE-2021-29765
CVE-2021-29765 affects IBM PowerVM Hypervisor FW940 and FW950. If an attacker gains service access to the FSP, they can decrypt data in the Platform KeyStore, enabling disclosure of sensitive information. Remediation: apply FW940.30 (VL940_071) or FW950.10 (VL950_072) or above on listed Power Sys...
Security Bulletin: The PowerVM Platform KeyStore functionality can be compromised if an attacker gains service access to the FSP
Summary An attacker that gains service access to the FSP can locate and through a series of service procedures decrypt data contained in the Platform KeyStore Vulnerability Details CVEID: CVE-2021-29765 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker to obtain sensitive information if...
CVE-2021-29765: Undefined Security Weakness
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
Security Bulletin: This Power System update is being released to address CVE 2021-20505
Summary POWER9: In response to a weakness in a set of PowerVM service procedures a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2021-20505. Vulnerability Details CVEID: CVE-2021-20505 DESCRIPTION: The PowerVM Logical Partition...
Security Bulletin: This Power System update is being released to address CVE-2021-20487
Summary Power9: A new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2021-20487. The Self Boot EngineSBE can be compromised from the service processor to allow injection of malicious code. An attacker that gains root access to the...